General
- Target 2026-08-09_30d2d6c91f70a0c92c76669bc9eccd58_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 15.6MB
- Sample260809-vkbw3ssdje
- SHA256 67619bedcf17bd304d482d5178b95980ccd1209361493dc5d12f4ecdaa9c8aaa
- MD5 30d2d6c91f70a0c92c76669bc9eccd58
- SHA1 85ce5705c5ce28de1d501bc8e4e9f15bbca0afff
- SHA512 bb3efedd045fbae9f1b3de09da5de65bb76ea8bd2fed8c76343c2f8659d0a611b501011fa00a1748efc681402670c0a0a5477ecbecd521d4de8f13515f61f688
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vb618U68Vb618US18UfWoK5:2cDcy+cDcyqou
- TLSH T13CF69D17F69440F9D06ED5748A558232EA72BC520B31ABDF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_30d2d6c91f70a0c92c76669bc9eccd58_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_30d2d6c91f70a0c92c76669bc9eccd58_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_30d2d6c91f70a0c92c76669bc9eccd58_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 15.6MB
- SHA256 67619bedcf17bd304d482d5178b95980ccd1209361493dc5d12f4ecdaa9c8aaa
- MD5 30d2d6c91f70a0c92c76669bc9eccd58
- SHA1 85ce5705c5ce28de1d501bc8e4e9f15bbca0afff
- SHA512 bb3efedd045fbae9f1b3de09da5de65bb76ea8bd2fed8c76343c2f8659d0a611b501011fa00a1748efc681402670c0a0a5477ecbecd521d4de8f13515f61f688
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vb618U68Vb618US18UfWoK5:2cDcy+cDcyqou
- TLSH T13CF69D17F69440F9D06ED5748A558232EA72BC520B31ABDF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry